HP-UX AAA Server A.08.02 Administrator's Guide

Table 109 Reply Item Attributes (continued)
Reply ItemCheck Item (HInt)Attribute
YesNoReply-If-Ack-Message
YesNoReply-Message
YesYesService-Type
YesNoSession-Timeout
YesNoTunnel-Assignment-ID
YesYesTunnel-Client-Auth-ID
YesYesTunnel-Client-Endpoint
YesYesTunnel-Medium-Type
YesYesTunnel-Password
YesYesTunnel-Preference
YesYesTunnel-Private-Group-ID
YesYesTunnel-Server-Auth-ID
YesYesTunnel-Server-Endpoint
YesYesTunnel-Type
General Attributes
Service-Type This attribute indicates a type of provided service. When used as a reply
item, the server returns the value to the NAS as an instruction to determine
the service to provide. When used as a check item, the server will reject
an Access-Request that does not include a hint for the specified
Service-Type.
Valid values for this attribute are:
• Login: The user should be connected to a host.
• Framed : A Framed Protocol should be started for the user, such as
PPP or SLIP.
• Callback-Login: The user should be disconnected and called back
and then connected to a host.
• Callback-Framed: The user should be disconnected and called back
and then a Framed Protocol should be started for the user, such as
PPP or SLIP.
• Outbound: The user should be granted access to outgoing devices.
• Administrative: The user should be granted access to the
administrative interface to the NAS from which privileged commands
can be executed.
• NAS-Prompt: The user should be provided a command prompt on
the NAS from which non-privileged commands can be executed.
• Authenticate-Only: Only Authentication is requested, and no
authorization information needs to be returned in the Access-Accept
(typically used by proxy servers rather than the NAS itself).
• Callback-NAS-Prompt: The user should be disconnected and called
back and then provided a command prompt on the NAS from which
non-privileged commands can be executed.
408 Attribute-Value Pairs